Find The RightJob.

DevSecOps Engineer II - SaaS

Overview

As a DevSecOps Engineer for the world's most advanced geospatial information systems company, you will lead the implementation of and support operations for advancing security principles, ensuring continuous compliance, automating risk assessment, data encryption, monitoring, via workflow automation, and consulting with various teams across Esri to help them advance their processes and methodologies. We're looking for a smart, security-focused engineer to join our Software Security & Privacy team to help push the boundaries of security while putting their mark on Esri's next-gen SaaS and on-prem offerings.

Responsibilities

Create, develop, and implement solutions to address infrastructure, platform, application, and SaaS security/compliance requirements
Create/maintain infrastructure and tools for secure software development and release, such as software analysis tools and automated report generation/alerting from derived data
Research and recommend tools and practices to improve security of Esri products, such as telemetry and monitoring, secure development patterns, and DevSecOps methodologies
Consult/assist other teams in adopting and effectively using the tools, practices, and information described above
Work closely with SaaS DevOps team to engineer and implement cloud security controls
Provide AWS and Azure Infrastructure/Systems Administration functions
Contribute to the creation of documentation on recommended practices, procedures, and tools described above

Requirements

2+ years of DevOps Engineering experience; experience working in a SaaS environment
Linux and Windows administration and shells
Familiarity with cloud provider ecosystems (Amazon AWS & Azure)
Experience with DevOps tools and concepts such as writing Infrastructure as Code (IaC)
Ability to perform Continuous Integration and Continuous Delivery (CI/CD), as well as other forms of automation, via modern systems such as GitHub Actions, GitLab, CircleCI, and more
Familiarity with at least one automation-friendly programming language (Python, TypeScript/JavaScript, Go, Rust, Ruby, and more), or skilled in other languages and willing to expand your horizons
Ability to define and deploy monitoring, metrics, and logging systems on AWS & Azure
Experience with using application security validations tools for pentesting, component analysis, static analysis and/or dynamic analysis
Interest in learning new technologies and techniques as a routine part of the job
Ability to communicate the need for changes in a collaborative manner while maintaining focus on core objectives
Bachelor's degree in Computer Science, Engineering, Information Systems, Data Science or a related field, or another technical degree and position-relevant experience.

Recommended Qualifications

Working knowledge of security risk frameworks (OWASP Top 10, SAN 25, BSIMM)
Experience with WAF implementation, threat modelling
Experience with Kubernetes, service mesh, container security
Familiarity with the Jenkins automation platform
Familiarity with development languages used for desktop/server application development (C, C++, Java, C#)
Experience in integrating test and security automation into CI/CD pipelines, like Selenium, GitHub Advanced Security tooling, and pull-request checks.
Working knowledge of Configuration Management tools such as Chef, Configuration-as-Code such as CloudFormation or Terraform
Good technical presentation skills
Working knowledge of Git
Knowledge of security & privacy frameworks such as FedRAMP, ISO 27001, and GDPR
Familiarity with Esri software
Information security or technical certifications such as CISSP, SSCP, GSE, OSCP is desirable

#LI-AL1

#LI-Onsite

The Company

At Esri, diversity is more than just a word on a map. When employees of different experiences, perspectives, backgrounds, and cultures come together, we are more innovative and ultimately a better place to work. We believe in having a diverse workforce that is unified under our mission of creating positive global change. We understand that diversity, equity, and inclusion is not a destination but an ongoing process. We are committed to the continuation of learning, growing, and changing our workplace so every employee can contribute to their life's best work. Our commitment to these principles extends to the global communities we serve by creating positive change with GIS technology. For more information on Esri's Racial Equity and Social Justice initiatives, please visit our website here.

If you don't meet all of the preferred qualifications for this position, we encourage you to still apply!

Esri is an equal opportunity employer (EOE) and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. If you need reasonable accommodation for any part of the employment process, please email askcareers@esri.com and let us know the nature of your request and your contact information. Please note that only those inquiries concerning a request for reasonable accommodation will be responded to from this e-mail address.

Esri Privacy Esri takes our responsibility to protect your privacy seriously. We are committed to respecting your privacy by providing transparency in how we acquire and use your information, giving you control of your information and preferences, and holding ourselves to the highest national and international standards, including CCPA and GDPR compliance.

Similar jobs